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Abstract- Urban infrastructures are the focus of terrorist acts 
because, quite simply, they produce the most visible impact, if 
not casualties. While terrorist acts are the most insidious and 
onerous of ali disruptions, it is obvious that there are many 

‘similarities to the way one should deal with these willful acts and 
those caused by natural and accidental incidents that have also 
resulted in adverse and severe consequences. However, there is 
one major and critical difference between terrorist acts and the 
other types of disruptions: the terrorist acts are willful — and 
therefore also adaptive, if not coordinated. One must counter 
these acts with the same, if not more sophisticated, willful, 
adaptive and informed approach. Real-time, information-based 
decision making — which Tien [2003] has called the decision 
informatics paradigm — is the approach advanced herein to help 
make the right decisions at the various stages of a disruption. 
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I, INTRODUCTION 


Urban infrastructures are the focus of terrorist acts because, 
quite simply, they produce the most visible impact, if not 
casualties. From the September 11, 2001 (ie., “9/11”) attack 
on New York City’s World Trade Center to the more recent 
March 11, 2004, attack on Madrid’s commuter trains, it is 
obvious that urban centers are indeed vulnerable to such 
hideous acts. A systemic or holistic approach to securing the 
infrastructure systems that underpin an urban, center is 
required. New York City (NYC), for example, is not only an 
obvious target of terrorism; it is also a major urban center, 
with all the attendant complexities of people, processes, 
products, physical structures and institutions. As a 
consequence, NYC — and its symbolic World Trade Center — 
was an obvious target for the 9/11 terrorists, whose 
colleagues had previously targeted the same symbolic 
structure back in 1993. 

While terrorist acts are the most insidious and onerous of 
all disruptions, it is obvious that there are many similarities to 
the way one should deal with these willful acts — which would 
also include a malicious prankster releasing an electronic 
virus on the Internet — and those caused by natural and 
accidental incidents that have also resulted in adverse and 
severe consequences. Indeed, the natural disasters of droughts, 
diseases, floods and earthquakes — including the 1899-1901 
drought in India, the 1917-1919 world-wide influenza 
epidemic, the 1931 Hwang-Ho flood in China, and the 2004 
Tsunami in South Asia — have been the scourge of mankind. 
Fortunately, accidental disruptions (e.g., asbestos 
contamination, carcinogen exposure, oil spills, power failures, 
and nuclear accidents) have thus far been less disastrous, but 
they may begin to rival the natural disasters in impact as one 


explores the potentially high-payoff but equally high-risk 
worlds of nanotechnology and biotechnology. Nevertheless, 
the public expects that the accidental hazards can and should 
be fixed as they are man-made; on the other hand, natural 
hazards are considered to be acts of God whose negative 
effects can only, at best, be mitigated. However, there is one 
major and critical difference between terrorist acts and the 
other man-made but accidental disruptions: the terrorist acts 
are willful — and therefore also adaptive, if not coordinated. 
Since terrorist — and other willful (e.g., electronic viruses, 
hacker attacks, and email spam) — acts are based on the most 
up-to-date intelligence or information, one must also counter 
these acts with the same, if not more sophisticated, willful, 
adaptive, coordinated and informed approach. 

More specifically, the approach of real-time, 
information-based decision making — which Tien [2003] has 
called the decision informatics paradigm — is focused on 
decisions and based on multiple data sources, data fusion and 
analysis methods, timely information, stochastic decision 
models and a systems engineering outlook. It should be 
emphatically stated that while the terms employed in 
describing the methodologies that underpin decision 
informatics are those belonging to decision analysis (.e., 
emergency management, statistics, risk analysis, etc.), 
decision informatics is clearly multidisciplinary in nature and, 
depending on the problem being considered, could include 
experts from science (i.e., information, visualization, 
cognition, sociology, etc.), engineering (L.€., 
telecommunications, biomedical, chemical, nuclear, etc.) and 
other disciplines (i.e., religion, theology, terrorism, culture, 
etc.). It provides a systematic and consistent way to address 
real-time emergency issues, including those concerned with 
the preparation for a major disruption, the prediction of 
such a disruption, the prevention or mitigation of the 
disruption, the detection of the disruption, the response to 
the disruption, and the recovery steps that are necessary to 
adequately, if not fully, recuperate from the disruption. More 
importantly, one must approach an urban emergency 
management problem in a systemic or holistic manner, 
especially given the interdependencies of the underlying 
infrastructure systems. 

Although the focus of this paper is primarily on terrorist 
disruptions, it is obvious that the decision informatics 
approach is likewise applicable to the preparation, prediction, 
prevention, detection, response and recovery steps associated 
with the emergency management of any major urban 
disruption. The remaining sections of the paper deal with the 
types of disruption, the stages of or life cycle in a disruption, 


eile 


0-7803-897 1-9/05/$20.00 ©2005 IEEE — 


the decision informatics paradigm, and the combination of 
types, stages and decisions in regard to the efforts of the U. 8. 
Department of Homeland Security and its 
academically-based Homeland Security Centers of 
Excellence, followed by some concluding remarks. 


i. TYPES OF DISRUPTIONS 


Modern society relies on the reliable operation of a set of 
human-built systems — each being a combination of people, 
processes, goods, services, physical structures and 
institutions — to sustain people themselves, infrastructures 
and commerce. In an urban center, these human-built or 
constructed systems include transportation (i.e., roads, 
bridges and rail); health (i.e., clinics, emergency rooms and 
hospitals); education (i-e., pre-college, college and continuing 
education); energy (i.e., electric power, gas and liquid fuels); 
telecommunications ({i.c., radio, telephone and internet); 
information technologies (i.e., file servers, database systems 
and networks), water (i.e., lakes, reservoirs and rivers); food 
(i.e., farms, markets and warehouses); sanitation (i.e., garbage, 
sewage and air pollution), structures (i.e., homes, buildings 
and spaces); civil order (i.e., police, fire and health); finance 
G.e., banks, insurance and security firms), and government 
(ie., local, state and federal). People, infrastructures and 
commerce all! rely on the constructed systems to provide the 
necessary goods and services. 

Historically, the nation’s critical infrastructures have been 
physically and logically separate systems that had little 
interdependence. However, as a result of advances in 
information technology and the necessity for improved 
efficiency and effectiveness, these infrastructures have 
become increasingly automated and interlinked. In fact, 
because the information technology revolution has changed 
the way business is transacted, government is operated, and 
national defense is conducted, the U. S. President [2001] 
singled it out as the most critical infrastructure to protect 
following 9/11. Thus, while the U. §. is considered a 
superpower because of its military strength and economic 
prowess, non-traditional attacks on its interdependent and 
cyber-supported infrastructures could significantly harm both 
the nation’s military power and economy. Clearly, 
infrastructures, especially the information infrastructure, are 
among the nation’s weakest links; they are vulnerable to 
willful acts of sabotage. The U. 8. National Academies’ 
Committee on The Role of Information Technology in 
Responding to Terrorism [2005] has made a number of 
recommendations to reduce vulnerabilities associated with 
the information infrastructure, including undertaking more 
research in authentication, detection, containment and 
recovery. - 

The infrastructure interdependencies are most obvious 
when a disruption occurs. For example, interruptions in 
power and communications following the 9/11 attack, in turn, 
forced the closing of the New York Stock Exchange, which is 
a critical part of the nation’s banking and finance 
infrastructure. More importantly, the infrastructure 


interdependence problems should not be minimized, 
especially from a security and reliability perspective; in fact, 
contingency plans or backup systems should be developed 


_and employed to mitigate these problems. 


Sadly, the same advances that have enhanced 
interconnectedness have created new vulnerabilities, 
especially related to equipment failure, human error, weather 
and other natural causes, and physical and cyber attacks. Thus, 
electronic viruses, biological agents and other toxic materials 
can tum a nation’s “lifelines” into “deathlines” [Beroggi and 
Wallace, 1995], in that they can be used to facilitate the 
spread of these materials —- whether by accident or by willful 
act. Even the Internet — with almost a billion users — has 
become a terrorist tool {[Talbot, 2005]; jihad websites are 
recruiting members, soliciting funds, and promoting violence 
(e.g., by showing the beheading of hostages). Also, as 
evidenced by the 9/11 attack, components of an infrastructure 
system can be used as weapons of destruction. Further, the 
built environment is often the battleground for engaging the 
threat or disruption and its impact. Office buildings, subways, 
airports, water pipes, and power-generation and transmission 
facilities are all possible targets for terrorist acts, resulting in 
fires, toxic materials, debris and flooding. 

As identified earlier, there are, in essence, three types of 
disruptions: those natural incidents due to nature and/or 
natural forces; those accidental incidents due to human errors 
and/or structural failures; and those willful incidents due to 
human acts and/or destructive weapons. The who, what, when 
and where of a number of well known disruptions occurring 
in the latter half of the 20" century can be considered — they 
include natural disasters caused by the 1969 Hurricane 
Camille, the 2002 SARS Epidemic, and the 2004 South Asia 
Tsunami; accidental tragedies due to the 1984 Bhopal Gas 
Tragedy, the 1986 Chemobyl Nuclear Disaster, and the 1989 
United 232 Explosion; and willful acts carried out in the 1993 
Oklahoma City Bombing, the 1995 Tokyo Subway Attack, 
and the 2001 9/11 Tragedy. Several of these disruptions (i.e., 
Bhopal, United 232, Oklahoma City, and Tokyo Subway) are 
further considered in Larson et al. [2004], especially in regard 
to lessons learned. 

More recently, the Office of State and Local Government 
Coordination and Preparedness of the U. 5. Department of 
Homeland Security [2005] provided 15 plausible disruption 
scenarios that could be used for planning purposes; indeed, 
these scenarios helped identify 36 needed preparedness and 
response capabilities. The question remains: Are there 
differences ‘between natural, accidental and willful 
disruptions? The answer is an emphatic yes; indeed, these 
differences point to the earlier stated need for a more adaptive, 
informed and decision-oriented approach to dealing with 
willful acts than to reacting to natural and accidental 
disasters. 


TH. STAGES IN A DISRUPTION 


The mission and overriding objective of the U. S. Federal 
Emergency Management Agency (FEMA), which is now a 


part of the 2002 established Department of Homeland 
Security (DHS) [Public Law 107-296, 2002], is to help the 
nation be ready to respond to disasters and disruptions of all 
kinds through a comprehensive, risk-based emergency 
preparedness program. Typically, FEMA’s comprehensive 
emergency management system is composed of four stages 
[Wallace and De Balogh, 1985]: preparedness, mitigation, 
‘emergency response and recovery. From a decision 
perspective, it is helpful to consider an expanded, six-stage 
process: preparation (corresponding to preparedness), 
prediction, prevention (corresponding to mitigation), 
detection, response (corresponding to emergency response), 
and recovery (corresponding to recovery). The additional 
prediction stage is necessary because it is beyond general 
preparation and helps focus and initiate prevention tactics; it 
requires a set of methodologies and/or technologies that is 
statistical in nature and risk-based in approach. The additional 
detection stage is also necessary; it follows prediction and 
precedes response and is very much dependent on data 
obtained from multiple data sources or sensors and the careful 
fusion and analysis of that data. 


A, Preparation 


In preparing for a major urban disaster, it is critical to learn 
from past incidents. Careful analysis of past natural disasters, 
accidental tragedies and willful acts highlight points of 
vulnerability, decisions that should not have been made, 
decisions that should have been made, etc, In regard to willful 
terrorist acts, one has to prepare for the unforeseen or 
unexpected, including the possibility that an act could include 
several related actions at different locations. Perhaps the 
weakest link in the preparation against a terrorist act is the 
unwillingness of intelligence organizations to communicate 
or share crucial information. 

It is critical for an urban center to prepare not just for urban 
security but also for urban safety. This dual purpose reflects 
teality, in that most, if not all, of the public safety resources 
are able to also secure the homeland; indeed, natural disasters 
and accidental tragedies result in safety concerns, while only 
willfui acts result in security concerns. Moreover, the costs 
associated with performing security duties can be considered 
to be a marginal add-on to the long established public safety 
mandate. 


B. Prediction 


In many regards, prediction parallels the preparation stage 
of a disruption, For a past type of disruption, preparation 
should already be made and prediction can then be employed 
to determine the likelihood that it might happen again. For a 
new type of disruption, prediction is necessary to first 
ascertain the potential nature of the disruption in all its 
dimensionalities, together with a level of confidence or 
accuracy regarding the prediction; this would then provide 
the reason for and the scope of a preparation plan. Thus, 
prediction details the likelihood, as well as the who, when, 
what and where, of a disruption. Based on this input, 
especially the likelihood statistic, appropriate preparation 


steps can be taken. Moreover, prediction should not only be 
about the first order impact of a disruption but also about 
higher-order impacts. In fact, secondary impacts are 
sometimes more devastating than the initial disaster; thus, 
hurricane-caused fresh water flooding of inland rivers and 
lakes may be more problematic than the initial coastal 
damages. 

In addition to statistical methods, there are a number of 
forensic approaches to determining the likelihood of an event. 
For example, many natural disasters and accidental tragedies 
are a result of a series of events that signal an impending 
catastrophe. Recognizing, understanding and appropriately 
reacting to such events — or precursors — might very well help 
forestall, if not mitigate, the catastrophe. Willful acts may 
also register such precursors; for example, increased cellular 
traffic used to signal an impending terrorist act until the 
terrorists became more cautious, having realized that the 
traffic was being monitored. 


C. Prevention 


A critical preventative measure is the use of identification 
technologies to prevent unlawful entry. For the most part, 
passwords, identification cards, tokens, keys and codes have 
been employed. Biometric - including, as examples, 
fingerprinting, iris scans, voice authentication and face 
recognition — systems are usually employed where security is 
critical; they are used for both verification (i.e., one-to-one 
matching) and identification (i.c., one-to-many matching). To 
minimize potential errors that may occur, multiple systems 
are being deployed; for example, foreign visitors to the U. S. 
must now provide prints of both index fingers and a picture of 
their face at the port of entry. Another approach suggested by 
Bumes et al. [2003] is an integrated system whereby, say, the 
wavelet transforms of both the fingerprints and the facial 
image are judiciously combined in the wavelet domain and 
then used for both verification and identification purposes. 
Although such an integrated or hybrid biometric system 
might add an extra layer of security, its effect on error rates 
roust still be determined. 

Interestingly, in regard to commerce, information 
technology and supply chain efficiencies have squeezed out 
many redundancies or inventories; just-in-time everything 
has been the mantra that has resulted in even greater 
interdependencies and productivity. Now, however, in order 
to prevent an adverse impact on the supply chains in the face 
of a major disruption, there is a need to enhance the reliability 
of these chains by building in more inventories (i.e., backup 
systems) and decreasing the interdependencies, resulting in a 
possible decrease in productivity. Clearly, there is a need to 
trade off between security and productivity; between 
just-in-time and just-in-case approaches. 


D. Detection 


With advances in technology, new devices can be 
developed to acquire data that may result in the, hopefully 
early, detection of a natural, accidental or willful incident. Of 
course, data are just that — data. As discussed in the next 
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section on decision informatics, it takes a careful fusion and 
analysis of the various data streams to obtain information 
concerning whether an incident is indeed being detected. 

Detection is a critical stage in the life-cycle of a disruption. 
An alert should be issued if there is ample evidence that an 
impending disruption may occur. With adequate prior 
preparation, such an alert should not cause panic but instead 
begin to mobilize the response resources and, if appropriate, 
initiate the prevention or mitigation action of evacuation. In 
fact, if a potential disruption is detected early enough and 
preventative counter measures can be effectively deployed, 
then there may not be a need to go to a full-blown response 
Stage. Consequently, more attention should be focused on 
detection; it could certainly lessen the impact of a disruption 
and mitigate, if not obviate, the need for a response. 


E. Response 


How prepared are urban centers to responding to terrorism 
in the post 9/11 era? The Rand Corporation {Davis et al., 2004] 
undertook a 2002 survey and found that law enforcement 
agencies which perceived the risk of a terrorist attack to be 
higher for their jurisdiction were more likely to undertake 
steps to improve their corresponding response preparedness. 

An important aspect of response concerns how the various 
data inputs are fused, analyzed and appropriately modeled 
and presented to the decision makers in a timely manner at 
both the scene and the command and control centers. The 
presentation format must facilitate cognition and should not 
be underestimated, whether it be displayed on a computer or 
personal data assistant, or visualized on a map, or verbalized 
in a conversation. 

Another important aspect of response concerns the 
immediate establishment of a moveable emergency staging 


and medical triaging center at or near the disruption site; the - 


center should, of course, be staffed by pre-trained experts. Yet 
another critical response issue is the repositioning of the 
unencumbered resources for another attack or in response to 
other incidents. Media management is likewise critical to the 
fesponse function, especially since it is the communication 
link to the citizenry-at-large. 


F. Recovery 


Depending on the nature of the disruption, alternate 
recovery steps can be taken. For example, damage to, say, the 
Wall Street financial system would’ require careful 
Teconstruction or recovery of the vital data, most of which 
should have been backed up on an off site server. Rebuilding 
of a physical structure would, of course, require more intense 
planning and execution. 

No matter what the disruption is, the first step is to 
stabilize the situation and then to ascertain the damages. The 
hext necessary step is to determine the resources -- including 
State and federal aid, as well as commercial insurance payouts 
~ required to adequately, if not fully, recover from the 
disruption. The amount of resources is, of course, also subject 
to the stated rules and regulations governing their availability. 
Again, having access to knowledgeable and pre-trained 


experts in this area would minimize victim frustrations and 
facilitate the recovery effort, which could take months, if not 
years, to carry out. i 


IV. DECISION INFORMATICS 


It is obvious that decision informatics or real-time, 
information-based decision making is needed for addressing 
major disruptions, especially in regard to terrorist acts that are 
quite adaptive in reality. That is, the nature of the required 
real-time decision (in connection with each of the six stages 
of a disruption) determines, where appropriate and from a 
systems engineering perspective, the data to be collected 
(possibly, from multiple, non-homogeneous sources) and the 
real-time fusion and analysis to be undertaken to obtain the 
needed information for input to the modeling effort which, in 
turn, provides the knowledge to support the required decision 


- inatimely manner. Feedback loops are within the context of 


systems engineering; they serve to refine the analysis and- 
modeling steps. 

Thus, decision informatics concerns three related issues 
(i.e., decisions, data and information) and is underpinned by 
three multi-disciplines (i.e., data fusion and analysis, decision 
modeling, and systems engineering), In abbreviated form, 
there are six steps in the decision informatics process: 
decisions, data, analysis, information, models, and systems. 


A. Decisions 


As noted earlier, effective urban emergency management is 
not only about making the right decisions; it is also about 
making timely decisions. This would be especially pertinent 
at the operational leve! (which, as indicated earlier, includes 
the detection and response stages of a disruption) where 
decisions must be made in real-time. On the other hand, at the 
tactical level (which includes the prediction and prevention 
stages of a disruption), decisions must be made in terms of 
days, if not hours; and at the strategic level (which includes 
the preparation and recovery stages of a disruption), decisions 
must be made in terms of months, if not weeks. No matter at 
what level a decision is made, it is critical to note that steady 
state analysis or models are of limited use in addressing the 
emergency management of urban disruptions. 


B. Data 


Sensors acquire data; they could be in the form of humans, 
robotic networks, aerial images, electronic signals, and other’ 
measures and signatures. More recently, data warehouses are 
proliferating and data mining techniques are gaining in 
popularity. No matter how large a data warehouse and how 
sophisticated a data mining technique, problems can, of 
course, occur if the data do not possess the desirable 
attributes of measurability, availability, consistency, validity, 
reliability, stability, accuracy, independence, robustness and 
completeness. The definition and collection of data must be 
motivated by the decisions that must be made based upon the 
information that is obtained from the processing (i.e., fusion 
and analysis) of the data. More importantly and from an urban 
emergency management perspective, a collaborative, 


decision-driven data base management system must be 
developed that can electronically access locally-generated 
data and provide appropriate information for real-time, 
distributed decision making, It should be noted that currently 
available collaborative software systems (e.g., E-Team) are 
stand-alones that are neither directly interfaced with critical 
data sources nor supported by appropriate decision-oriented 
algorithms and models. 


C. Analysis 


The fusion and analysis of data to yield valid information 
or intelligence is not only about the application of these 
methods; it is also about specialized analysts who have, as 
examples, the linguistic skills to translate important data, the 
ability to develop software agents to troll the Web (especially 
the forthcoming Semantic Web with its definitional tags) for 
valuable information, and the cultural or religious 
background to interpret the data. The fusion and analysis of 
qualitative and quantitative data take on an extra dimension of 
difficulty when both steps have to be undertaken in real-time 
[Hu and Tien, 2004}. 


D. Information 


In general, information technology has transformed 
large-scale information — really data — systems from being the 
“glue” that holds the various units of an organization together 
to being the strategic asset that provides the organization with 
its competitive advantage. However, as ailuded to earlier, 
while information technology can transform a data poor 
situation into a data rich environment, the fact remains that 
the data need to be effectively and efficiently fused and 
analyzed in order to provide appropriate information for 
decision making. Thus, in order to overcome the somewhat 
embarrassing data rich, information poor (DRIP) problem 
that Tien [2003] forewarned, it is critical to develop more 
sophisticated data fusers and data analyzers that could yield 
the information or knowledge for making smart choices. In 
essence, information technology is a necessary, but not 
sufficient, condition for robust and timely decision making; 
the sufficient condition is one based on decision informatics. 

Data must be processed to yield timely information on 
threats, vulnerabilities to these threats, and the possible 
resultant risks or damages, including mortality, morbidity, 
physical, environmental, and financial consequences. The 
results of any analysis must support the cognitive process of 
mental visualization, capable of creating images from 
complex multidimensional data, including structured and 
unstructured text documents, measurements, images and 
video. 


E. Models 


As noted above, at the operational level, there is a need for 
real-time decision support models. In such a situation, it is not 
just about speeding up the models and their solution 
algorithms, indeed, it concemms reasoning under both 
uncertainty and time constraints. Santos and his colleagues 
have contributed extensively to this area: they [Santos, 1996] 


have employed linear potential functions to approximate 
solutions to decision problems cast as Bayesian networks; 
they [Santos and Young, 1999] have formulated uncertain 
temporal reasoning without the use of Markov models and yet 
have been able to elegantly cope with the resultant 
combinatorial overhead; and they [Santos et al., 2003] have 
developed a seminal way of incrementally updating Bayesian 
knowledge bases. The algorithms are based on a seminal 
paper by Holland [1962] that posited a logical theory for 
adaptive systems. 

Ata more tactical level and as Larson [2004, 2005] details, 
there is a range of decision medels for emergency response 
planning. Actually, much of the urban emergency response 
modeling came out of the efforts of the New York 
City-RAND Institute (NYCRI), a 1968-1975 partnership 
between the RAND Corporation and New York City [Green 
and Kolesar, 2004]. 

At the strategic, policy or preparedness level, there are a 
number of appropriate models that can support such decisions. 
As examples, Kaplan et al. [2002] developed a set of complex 
models to demonstrate that the best prevention strategy to a 
smallpox attack would be to undertake immediate and 
widespread vaccination; Wein et al. [2003] similarly advocate 
for a widespread dispersion of antibiotics following an 
anthrax attack; and Yu et al. [2003] developed an effective 
airline recovery algorithm that can be applied following an 
extended halt in operation, as happened in 9/11. 


F, Systems 


Systems engineering is about integrating products, 
processes and operations from a holistic perspective, 
especially human-centered systems that are 
computationally-intensive and intelligence-oriented. It can 
be considered a multidiscipline that addresses a system from a 
life-cycle and cybemetic (i.e., feedback and control) 
perspective. A critical aspect of systems engineering within a 
democratic system is the maintenance of personal privacy. 
O'Harrow [2005] takes a look at the government surveillance 
trend and warns that such surveillance programs reflect a 
shadowy new alliance between private sector firms and 
government agencies, one that is unaccountable and allows 
for no due process and redress when one is being unfairly 
harmed or compromised. 


¥. CONCLUDING REMARKS 


Securing the homeland from damaging willful acts is a 
matter of tradeoffs. It is a tradeoff between security and 
people; in particular, people’s privacy, civil liberties and 
quality of life. It is a tradeoff between security and 
infrastructures; in particular, infrastructures that are highly 
interdependent. It is a tradeoff between security and 
commerce; in particular, commerce. that is based on highly 
efficient and non-redundant processes. In short, it is a tradeoff 
between security and a free society. « 

Interestingly, the tools or technologies that underpin a 
modern society are likewise the weapons that can be used to 
undermine, if not destroy, society. Biological, chemical and 


nuclear breakthroughs can also be considered to be weapons 
of mass destruction; the highly effective Internet provides a 
medium for cyber viruses, hackers and spammers; and 
airplanes are employed as missiles against people, 
infrastructures and commerce. 

The decision informatics approach to urban emergency 
management that is detailed herein can clearly address a 
number of vulnerabilities, including natural disasters, 
accidental tragedies and willful acts. Several comments 
should be made in regard to this approach. First, it is 
multidisciplinary in nature; obviously, depending on the 
problem being considered, it requires experts from many 
disciplines. Second, it is evolutionary in practice; as a 
problem becomes better understood, the approach could be 
better refmed and made more expeditious. Third, it is 
systemic in scope; it seeks to consider a problem from 
different perspectives, in terms of, as examples, efficiency 
and reliability, public and private goals, and domestic and 
international concerns. 

The purpose of this paper, then, is to augur for the 
development of decision technologies that can be employed 
to prepare for a major disruption, if not predict and possibly 
prevent the disruption. Such technologies should also detect 
the disruption, identify the responses required to deal with the 
resultant situation, and then, following the disruption, specify 
the recovery steps that are necessary to satisfactorily 
recuperate from the disruption. 
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